This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa
File: 3133382e302e3138382e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: qSP2Fy2Q2uk3M0K5Ii3m00o6p8GszccVjwUNQUYiSoo=
Subject key identifier: C8:5A:50:A4:43:3E:4F:E3:F6:65:B3:C6:8C:F5:85:41:48:AF:9C:F1
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 49C2684096F8FE4F5321B562D659DB4784A80CEA
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:32:46 +0000
ROA not before: Wed 03 Dec 2025 00:27:46 +0000
ROA not after: Wed 02 Dec 2026 00:32:46 +0000
asID: 52838
IP address blocks: 138.0.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c2:68:40:96:f8:fe:4f:53:21:b5:62:d6:59:db:47:84:a8:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:27:46 2025 GMT
Not After : Dec 2 00:32:46 2026 GMT
Subject: CN=C85A50A4433E4FE3F665B3C68CF5854148AF9CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:c0:0b:b0:50:8d:b4:29:55:d9:98:aa:62:
db:ce:35:f9:f9:81:b3:e7:24:a7:c0:e6:2c:04:e9:
e5:92:04:f8:b4:1f:b0:61:29:e2:b2:1c:9b:ea:53:
b0:e4:ab:ca:03:ce:23:bc:b9:19:62:c2:1b:9a:00:
21:d7:8a:8e:39:e8:be:ee:7b:2a:15:31:b7:ab:e6:
3d:3e:9e:6b:95:84:83:1e:3b:ed:3e:a0:8c:a7:e9:
4f:47:05:93:8c:0b:e3:be:32:c2:41:fd:31:58:16:
49:db:cd:7a:74:bf:85:db:d7:df:ac:10:db:45:99:
d1:b4:92:1a:c7:a4:64:9b:b4:4e:9e:ab:06:a5:8f:
5d:49:3f:9c:dd:f7:24:05:d8:a6:03:fa:4a:9a:e6:
c1:9e:50:4e:94:9b:2b:70:94:7e:55:41:fa:e2:4c:
e5:34:46:dc:c3:d0:3d:32:81:8a:3d:df:e5:db:1f:
f6:50:63:51:b8:8d:23:98:a8:83:16:4d:92:8b:5c:
fb:bd:30:e6:a3:c0:10:45:89:4d:a3:33:2e:0b:ef:
e0:a0:d4:68:14:05:e1:f3:70:b0:81:22:99:ff:8f:
d0:9d:4b:96:54:75:d0:79:14:58:b4:ca:4c:6d:07:
25:40:6d:e5:9d:ce:ba:34:90:51:15:94:29:60:ce:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:50:A4:43:3E:4F:E3:F6:65:B3:C6:8C:F5:85:41:48:AF:9C:F1
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.188.0/23
Signature Algorithm: sha256WithRSAEncryption
00:47:98:23:93:36:70:ae:36:e6:4c:0d:2f:5e:69:5d:62:3b:
08:e8:3f:e5:bd:b2:63:87:e7:7b:e4:71:8f:24:78:04:0a:b4:
43:88:15:0b:0f:6e:a6:3e:13:8d:0e:ed:6b:17:a6:c4:4d:c4:
ab:c8:36:11:57:fb:cc:77:e7:58:9b:c3:da:98:32:51:b2:44:
4d:ab:50:59:3f:a5:f0:06:4b:db:85:37:39:ca:e6:4e:69:64:
86:6e:9d:d1:de:4d:cd:61:67:b9:ed:35:7f:50:03:cf:fe:30:
ff:b8:16:0b:5d:46:ed:e6:09:a5:c3:c8:bf:44:99:b1:12:76:
a7:9b:b7:33:f6:dd:35:0c:b7:eb:ed:72:8b:26:00:63:e6:9b:
d8:b8:09:c7:05:f6:ac:d3:dd:1a:9a:c0:96:45:e9:fe:b7:17:
4f:ef:32:4f:1c:0f:f7:98:24:34:49:a4:46:0b:40:c6:c4:55:
1a:a6:62:f4:30:6c:78:8a:ce:04:3e:48:96:0b:b4:2c:24:b2:
5d:7c:f3:47:6c:e9:8e:52:03:59:7f:53:28:5d:86:6f:4f:b1:
e3:0b:ce:27:1b:8d:11:c1:5b:e0:91:1f:12:94:6b:78:5b:8b:
b6:ed:e6:ba:3c:ba:e1:24:42:12:44:b6:c9:8c:cb:08:3d:93:
32:f6:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:19 2025 by rpki-client